Privacy Policy
Draft — pending reviewThis policy explains what personal data Tastello ("we", "us") collects, why we collect it, who we share it with, and the choices and rights you have. Tastello is a wine-recommendation app for people aged 18 and over.
The data controller is [LEGAL ENTITY], contactable at [CONTACT EMAIL][BUSINESS ADDRESS]. If we are registered with the UK Information Commissioner's Office, our registration number is [ICO REG].
1. The data we collect
Account information
When you sign in with Sign in with Apple, we receive an account identifier and, if you choose to share it, your name and an email address (which may be Apple's private relay address). We use this only to create and secure your account.
Your cellar, ratings and notes
The bottles, ratings, tasting notes and drinking history you add are stored in your account so they sync across your devices.
Photos you scan
When you photograph a wine list, shelf or bottle, the text is read on your device. The extracted text (not the raw image) is then sent to our recommendation service so we can read the list and suggest wines.
Location
If you grant location access, we use your location to detect the venue you are at or near so the right wine list appears automatically. Location is used to identify a venue; we do not build a continuous history of your movements.
Preferences you give the recommender
The food, mood, occasion and taste preferences you enter are sent to our recommendation service to tailor your picks, and are used to learn your taste over time.
Contributions to the shared menu database
If you contribute a wine list or menu, it is added to Tastello's shared community database associated with a contributor identifier, so other users benefit from it.
Usage analytics
We record how the app is used (for example which features are opened and whether a recommendation was chosen) to understand what works and improve the app.
Subscriptions
If and when Tastello offers a paid subscription, payments are processed by Apple; we receive confirmation of your subscription status but not your card details. We may use [a subscription-management provider such as RevenueCat] to manage entitlements.
2. Why we use it (legal bases)
- To provide the app — account, cellar sync, recommendations, venue detection (performance of our contract with you).
- To improve the app — analytics and taste learning (our legitimate interests in building a better product).
- To keep the community safe — moderating contributed content (legitimate interests and legal compliance).
- With your consent — where we ask for a device permission such as location, camera or calendar, you can grant or refuse it and change your mind in your device settings.
3. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run Tastello:
- Apple — sign-in and, for subscriptions, payment processing.
- Google Firebase — account authentication, database storage and analytics.
- Cloudflare — hosting and the service that routes recommendation requests.
- Anthropic — the AI that generates wine recommendations receives the menu text and preferences described above.
- Affiliate networks and retailers — "buy" links are affiliate links; following one may share a click identifier with the retailer or affiliate network so any purchase is credited to us. See our Terms for the affiliate disclosure.
- [Wine-Searcher — if/when retail-price comparison is enabled, a wine name is sent to obtain a reference price.]
Some of these providers process data outside the UK. Where they do, appropriate safeguards (such as standard contractual clauses) apply.
4. How long we keep it
We keep your account data for as long as your account exists. When you delete your account (Profile → Delete account), your cellar, ratings and history are removed. Menus you contributed to the shared database may remain available to other users but are disassociated from your account. Analytics are retained in aggregated form.
5. Your rights
Under UK data protection law you can ask us to access, correct, delete or export your data, or object to certain processing. You can delete your account and data at any time from within the app. To make any other request, contact [CONTACT EMAIL]. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
6. Children
Tastello is intended only for adults of legal drinking age (18+ in the UK). It is not directed at children and we do not knowingly collect data from anyone under 18.
7. Changes to this policy
We may update this policy from time to time. We will change the "last updated" date above and, for significant changes, let you know in the app.
8. Contact
Questions about this policy or your data: [CONTACT EMAIL].